Lucene search
+L

2383 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/12/21 12:0 a.m.30 views

Adobe After Effects MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.7AI score0.00303EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/21 12:0 a.m.29 views

Adobe After Effects 3GP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.7AI score0.00303EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/21 12:0 a.m.31 views

Adobe After Effects JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3AI score0.00333EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/21 12:0 a.m.28 views

Adobe After Effects MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.2AI score0.00303EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/21 12:0 a.m.34 views

Adobe After Effects MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.2AI score0.00303EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2021/12/21 12:0 a.m.80 views

Adobe After Effects < 18.4.3 / 22.0.0 < 22.1.1 Multiple Vulnerabilities (APSB21-115)

The version of Adobe After Effects installed on the remote Windows host is prior to 18.4.3, 22.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-115 advisory. - Adobe After Effects versions 22.0 and earlier and 18.4.2 and earlier are affected by an...

7.8CVSS6.3AI score0.01807EPSS
SaveExploits0References11
Zero Day Initiative
Zero Day Initiative
added 2021/12/21 12:0 a.m.41 views

Adobe After Effects JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.1AI score0.00303EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/21 12:0 a.m.30 views

Adobe After Effects MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.7AI score0.00303EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/21 12:0 a.m.38 views

Adobe After Effects TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.6AI score0.00341EPSS
SaveExploits0References1
Talos
Talos
added 2021/12/20 12:0 a.m.52 views

Blackmagic Design DaVinci Resolve R3D DPDecoder Service frame parsing uninitialized uuid object vulnerability

Summary When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed from a frame within the video container. Upon destruction of the object that owns it, the...

9.8CVSS9.6AI score0.17945EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2021/12/20 12:0 a.m.8 views

PT-2021-7521 · WordPress · Image Hover Effects Ultimate

Name of the Vulnerable Software and Affected Versions: Image Hover Effects Ultimate plugin for WordPress versions up to, and including, 9.7.3 Description: The issue is related to Stored Cross-Site Scripting via the Title and Description values that can be added to an Image Hover due to insufficie...

6.4CVSS5.1AI score0.00508EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.6 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to the manipulation of the null pointer, allowing attackers to trigger a service failure.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the handling of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause a service failure using a specially crafted PDF file...

6.5CVSS6.6AI score0.0133EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2021/12/17 12:0 a.m.15 views

WordPress Image Hover Effects Ultimate has an unspecified vulnerability

WordPress is a set of blogging platforms developed by the WordPress Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress Image Hover Effects Ultimate plugin 9.6.1 and earlier versions have a security vulnerability that can ...

9.8CVSS2.3AI score0.0674EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2021/12/16 9:2 p.m.51 views

vault-cli contains possible RCE when reading user-defined data

Impact What kind of vulnerability is it? Who is impacted? vault-cli features the ability for rendering templated values as explained in the documentation. When a secret starts with the prefix !template!, vault-cli interprets the rest of the contents of the secret as a Jinja2 template. Jinja2 is a...

9.1CVSS0.6AI score0.05004EPSS
SaveExploits1References8Affected Software1
OSV
OSV
added 2021/12/16 9:2 p.m.37 views

GHSA-Q34H-97WF-8R8J vault-cli contains possible RCE when reading user-defined data

Impact What kind of vulnerability is it? Who is impacted? vault-cli features the ability for rendering templated values as explained in the documentation. When a secret starts with the prefix !template!, vault-cli interprets the rest of the contents of the secret as a Jinja2 template. Jinja2 is a...

8.4CVSS9.3AI score0.05004EPSS
SaveExploits1References8
VulnCheck KEV
VulnCheck KEV
added 2021/12/16 12:0 a.m.4 views

VulnCheck KEV: CVE-2021-36888

Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate versions = 9.6.1 WordPress plugin...

9.8CVSS7.3AI score0.0674EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/15 7:15 p.m.25 views

CVE-2021-36888

Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate versions = 9.6.1 WordPress plugin...

9.8CVSS0.0674EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/15 7:15 p.m.8 views

CVE-2021-36888

Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate versions = 9.6.1 WordPress plugin...

9.8CVSS5.8AI score0.0674EPSS
SaveExploits1References2
Prion
Prion
added 2021/12/15 7:15 p.m.17 views

Code injection

Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate versions = 9.6.1 WordPress plugin...

7.5CVSS9.3AI score0.0674EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/12/15 6:6 p.m.27 views

CVE-2021-36888 WordPress Image Hover Effects Ultimate plugin <= 9.6.1 - Unauthenticated Arbitrary Options Update leading to full website compromise

Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate versions = 9.6.1 WordPress plugin...

9.8CVSS9.6AI score0.0674EPSS
SaveExploits1References2
Rows per page
Query Builder